I am trying to understand in details as to how "Active Directory Password Reset and Account Unlock" works. Do we require PDC emulator to change the password and unlock the accounts. If the users are not able to reach PDC will they be able to change their passwords and unlock accounts. Will they face any issue.
As per my understanding the password is changed locally on the Domain Controller and PDC gets the prefrential update of the same and if the PDC is down the users will be able to change the password but I am not very sure how unlock works.
Please let me know if anybody has any document related to this.